Privacy Policy

1. Who we are

Nirvanta AI is provided by Nirvanta Technologies Inc. (“Nirvanta”, “we”, “us” or “our”), 42 Broadway, Suite 12-700, New York, NY 10004, United States. We are responsible for the personal information described in this policy.

This policy applies to the Nirvanta AI mobile app for iOS and Android (the “App”) and to the website at nirvanta.app (the “Website”), together the “Services”.

2. Information you provide

• Account information. Your email address and a password (stored only as a secure hash). If you sign up with Apple or Google, we receive an account identifier from that provider, your email address (or an Apple private relay address, or none) and whether it has been verified.
• Profile and preferences. Your first name, the goals you select, preferred tone, default voice, volume settings, time zone, reminder schedule, quiet hours and notification preferences.
• Content you create. The categories, tones and session lengths you choose, any notes you add to describe your situation, the titles of your sessions, and your favorites.
• Mood check-ins. The moods you select and any text you write when checking in.
• Voice recordings. If you choose to create affirmations in your own voice, the voice sample you record.
• Communications. Information you include when you contact us, such as your email address and the content of your message.

Notes and mood check-ins can describe how you feel. Please share only what you are comfortable with — these fields are optional.

3. Information created when you use the App

• Scripts and audio. The affirmation scripts and audio sessions generated for you.
• Voice profile. If you use voice cloning, a voice profile created from your recording and held by our voice provider.
• Listening and practice data. Plays, playback position, completed sessions, minutes listened per day, streaks and milestones.
• Plan and usage. Your plan, the number of sessions used, and records of notifications sent to you.

4. Information collected automatically

• Device and connection information. Your device’s user-agent (which can include device type, operating system and app version), IP address, and the date and time of requests. We use IP addresses to protect the Services, for example to limit repeated requests, and they may appear in our server logs.
• Push notification tokens. A token and platform (iOS or Android) that let us send you notifications if you allow them.
• App analytics. We use Google Analytics for Firebase to understand how the App is used — for example, which screens are opened and which features are used — along with device information (such as model, operating system and app version), an app instance identifier and approximate location (such as country) derived from your IP address.
• Crash reports. We use Firebase Crashlytics to collect information about crashes and errors, such as the device state and technical details at the time of the crash, so we can fix problems.
• Email engagement. Our email provider records whether account emails were delivered and opened.

5. Subscriptions and purchases

Subscriptions are purchased through the Apple App Store or Google Play. Apple and Google process your payment; we never receive your card or payment details. We receive and store information needed to provide your plan, such as transaction or purchase identifiers, the product and plan purchased, subscription status, renewal and expiry dates, and the price and currency reported by the store.

6. How we use information

We use personal information to:

• create your account, verify your email address and keep you signed in securely;
• generate your affirmation scripts and audio, store them in your library and play them back;
• personalize your experience — for example, using your first name, goals and tone in your sessions and reminders;
• track streaks and practice history and send the reminders and notifications you have enabled;
• provide your plan, verify purchases and manage session limits;
• keep the Services safe, including moderating content and showing crisis resources where appropriate;
• prevent abuse, fraud and security incidents;
• understand usage, diagnose crashes and improve the Services;
• respond to your requests and provide support; and
• comply with legal obligations and enforce our Terms of Service.

We do not use your content to train our own AI models, and we do not use your information for advertising.

7. AI processing and safety

When you create a script or check in, the text you provide is sent to OpenAI to generate your affirmations and to check the content for safety. Scripts are sent to ElevenLabs to generate speech. These providers process the information on our behalf to provide the Services.

If a safety check indicates that you may be at risk of harm, the App shows crisis support resources instead of generating a session, and a record of the check-in is kept with your mood history. Nirvanta AI is not a medical or crisis service. If you are in danger, contact your local emergency services.

8. Notifications

With your permission, we send push notifications such as reminders, streak updates and news about new content. Notification text may include your first name. You can turn notifications off in the App’s settings or in your device settings at any time.

9. Service providers

We share information with service providers that process it on our behalf to operate the Services. They may only use it to provide their services to us.

10. Other sharing

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Apart from our service providers, we share information only:

• with Apple or Google as needed to verify and manage purchases;
• when required by law, or when we believe in good faith it is necessary to protect the rights, property or safety of our users, the public or Nirvanta;
• as part of a merger, acquisition, financing or sale of assets, subject to this policy’s protections; or
• with your consent or at your direction.

11. Where information is stored

Nirvanta Technologies Inc. is based in the United States. Our servers and primary database are located in Singapore, and our service providers may process information in the United States, the European Union and other countries. These countries may have data protection laws different from those where you live. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses.

12. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Services, then delete it, except as described below.

• Verification and password-reset codes: deleted within 24 hours after they expire.
• Sign-in sessions: expire after 7 days of inactivity.
• Daily practice history: the most recent 90 days.
• Notification records: 120 days.
• Database backups: kept for up to 30 days, then permanently deleted.
• Records of store purchase notifications: kept after account deletion in a form no longer linked to your account, for accounting, fraud prevention and legal purposes.
• Server logs: kept for a limited period for security and troubleshooting.

13. Deleting your data and your account

You can delete individual sessions and mood check-ins in the App. You can also permanently delete your account from within the App at any time. When you delete your account, we delete your account records, your sessions and audio files, your mood check-ins, your preferences and practice history, and any voice profile created for you with our voice provider. Residual copies in backups are removed as backups expire, within 30 days.

If you can’t access the App, email support@nirvanta.app from the email address on your account. See how to delete your account for step-by-step instructions.

Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play account settings to stop future charges.

14. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent at any time where we rely on consent. You can update your name and preferences in the App, and manage notifications in the App or your device settings.

European Economic Area and United Kingdom. We process personal information to perform our contract with you (to provide the Services), based on our legitimate interests (such as security, analytics and improving the Services), with your consent (such as push notifications and voice cloning), and to comply with legal obligations. You may lodge a complaint with your local data protection authority.

United States. Residents of certain states, including California, may have rights to know, access, correct and delete personal information, and to opt out of the sale or sharing of personal information or certain uses of sensitive information. We do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising your rights. You may use an authorized agent to make a request on your behalf.

To make a request, email support@nirvanta.app from the email address on your account. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law.

15. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age of majority where you live, please use the Services with the involvement of a parent or guardian. If you believe a child under 13 has provided us with personal information, contact support@nirvanta.app and we will delete it.

16. Security

We use safeguards designed to protect your information, including encryption in transit, hashed passwords and verification codes, private storage for audio delivered through short-lived links, encryption of sessions downloaded for offline listening, and restricted access to systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

17. This website

nirvanta.app does not use cookies, analytics or advertising trackers, and fonts and images are served from our own servers. Like most websites, our web server records technical information about requests — such as IP address, browser user-agent, the page requested and the time — for security and troubleshooting.

18. Changes to this policy

We may update this policy from time to time. We will post the updated policy here and change the effective date above. If we make material changes, we will provide additional notice, such as in the App or by email.

19. Contact us

For privacy questions or requests, contact us at:

Nirvanta Technologies Inc.
42 Broadway, Suite 12-700, New York, NY 10004, United States
Email: support@nirvanta.app